Privacy Policy

1. Introduction

Moducraft respects your privacy and is committed to protecting your personal information. This policy explains how we collect, use, and safeguard information when you visit moducraft.io or engage our services.

Moducraft (Pty) Ltd (Registration: 2026/138609/07) is a South African company. We comply with the Protection of Personal Information Act (POPIA) of South Africa. Where we serve clients in the United States, United Kingdom, or European Union, we also respect the applicable data protection principles in those jurisdictions. Where we process personal data of individuals in the European Economic Area (EEA) or United Kingdom, we also comply with the General Data Protection Regulation (GDPR). For California residents, we comply with applicable provisions of the California Consumer Privacy Act (CCPA).

2. Information we collect

We collect information that you provide directly to us, including:

• Name and email address (via our contact form)
• Business name and website URL
• Project details and requirements
• Any information you include in your message to us

We also automatically collect limited technical information when you visit our website:

• IP address (anonymised where possible)
• Browser type and version
• Pages visited and time spent
• Referring website

3. How we use your information

We use the information we collect to:

• Respond to your enquiries and provide the services you request
• Send you project-related communications
• Process payments and manage our business relationship
• Improve our website and services
• Comply with legal obligations

We will never sell, rent, or share your personal information with third parties for marketing purposes.

4. Legal basis for processing

Under POPIA, we process your information based on:

• Consent — when you submit a contact form or sign up for communications
• Contractual necessity — when we need your information to deliver services you have engaged us for
• Legitimate interest — for website analytics and service improvement

5. Your rights under GDPR (EEA and UK residents)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation:

• Right of access — you may request a copy of the personal data we hold about you
• Right to rectification — you may request that we correct inaccurate or incomplete personal data
• Right to erasure — you may request that we delete your personal data ("right to be forgotten"), subject to legal obligations
• Right to restrict processing — you may request that we limit how we use your data
• Right to data portability — you may request your personal data in a structured, commonly used, machine-readable format
• Right to object — you may object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Right to lodge a complaint — you may lodge a complaint with a supervisory authority in your country of residence

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

6. Your rights under CCPA (California residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to know — you may request details about the categories and specific pieces of personal information we have collected about you
• Right to delete — you may request that we delete the personal information we have collected from you, subject to certain exceptions
• Right to opt out of sale — we do not sell personal information. If this ever changes, we will provide a clear opt-out mechanism
• Right to non-discrimination — we will not discriminate against you for exercising any of your CCPA rights

To exercise any of these rights, contact us at [email protected].

7. Cookies and tracking

Our website uses cookies for analytics and essential site functionality. Specifically:

• Google Analytics cookies (_ga, _ga_*) — used to distinguish unique visitors and track site usage. These cookies are set when you visit our site and expire after 2 years. The data collected is anonymised and used to understand how visitors interact with our site.
• Microsoft Clarity — used for heatmaps, session recordings, and behaviour analytics to understand how visitors interact with our site. Clarity may set cookies and collects anonymised usage data. See Microsoft's privacy statement for details.
• Cloudflare Turnstile cookies — set on our contact form to prevent spam. See Cloudflare's privacy policy for details.

You can control cookies through your browser settings. Disabling analytics cookies will not affect your ability to use the site.

8. Payment processing

We use standard payment providers to process invoices and project payments. We do not store your credit card or bank details on our servers. Payment processing is handled by our payment providers in accordance with their own privacy policies and security standards.

9. Data storage and security

Your personal information is stored securely. Form submissions are stored within our content management system and are accessible only to authorised Moducraft team members. We use HTTPS encryption on all pages.

We retain your information only for as long as necessary to fulfil the purposes described in this policy, or as required by law.

10. International data transfers

As Moducraft serves clients in the United States, United Kingdom, and Europe, and uses third-party services based in various countries, your information may be processed or stored outside South Africa. Where this happens, we take reasonable steps to ensure your information is protected in line with Chapter 9 of POPIA and applicable international data protection principles.

Where personal data is transferred from the EEA or UK to South Africa, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) where required. South Africa has not received an adequacy decision from the European Commission; accordingly, we implement supplementary measures to ensure your data is afforded an equivalent level of protection.

11. Third-party services

We may use the following third-party services that process data on our behalf:

• Cloudflare — security and performance (Turnstile spam prevention)
• Resend — delivers the email from our contact form to us. See Resend's privacy policy for details.
• Google Analytics — website usage statistics (page views, traffic sources, device types). See Google's privacy policy for details. You can opt out by installing the Google Analytics opt-out browser add-on.
• Microsoft Clarity — heatmaps, session recordings, and behaviour analytics. See Microsoft's privacy statement for details.
• Zoho Bookings — appointment booking (if you choose to book a call). See Zoho's privacy policy for details.

Each third-party service has its own privacy policy governing the use of your data.

12. Your rights under POPIA (South African residents)

If you are a South African resident, you have the following rights under the Protection of Personal Information Act:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to the processing of your information
• Withdraw consent at any time
• Lodge a complaint with the Information Regulator

To exercise any of these rights, contact us at [email protected].

You also have the right to lodge a complaint directly with the Information Regulator (South Africa):

The Information Regulator (South Africa)
Website: inforegulator.org.za
POPIA complaints: [email protected]
Telephone: 010 023 5200

13. Children's privacy

Our services are not directed at children under 18. We do not knowingly collect personal information from children.

14. Changes to this policy

We may update this privacy policy from time to time. The most current version will always be available on this page with the updated date shown above.

15. Information Officer and contact

Moducraft has appointed an Information Officer who is responsible for our compliance with POPIA and for handling requests relating to your personal information.

We also maintain a PAIA Manual, prepared under the Promotion of Access to Information Act, which describes the records we hold and how to request access to them. It is available on request from our Information Officer.

For any privacy-related question or request, or to reach our Information Officer, please contact:

Moducraft (Pty) Ltd
Registration: 2026/138609/07
Email: [email protected]
92-94 Rosmead Ave, Kenilworth, Cape Town 7708, South Africa